Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
File:                     Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft (raw, json)
Hash identifier:          cLs6rdFq73gAzxkcugNOM7CyY2XObWXUKpOCfRQg7HA=
Subject key identifier:   F0:AB:7E:11:93:A9:9F:2A:36:B1:E3:EA:A4:5A:17:5C:38:77:E0:BD
Authority key identifier: 0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
Certificate issuer:       /CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Certificate serial:       019355E43C439F182E78B9FE35268F2287F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
Manifest number:          07EC
Signing time:             Fri 22 Nov 2024 22:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:41 +0000
Files and hashes:         1: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl (hash: Ia5X+vT0qS3JUUUgfzShA1gqIQ6Zbadi4psOssX72kc=)
                          2: W3y7u2g9NtdZgM-Bk0FIL4Ts9xs.roa (hash: FFqDPdAt8yYUgCt1VUIl0KsoOpSy32KbURaYuItntwg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:3c:43:9f:18:2e:78:b9:fe:35:26:8f:22:87:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
        Validity
            Not Before: Nov 22 22:00:41 2024 GMT
            Not After : Nov 23 22:00:41 2024 GMT
        Subject: CN=f0ab7e1193a99f2a36b1e3eaa45a175c3877e0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:c0:6b:1a:0b:69:49:e1:8b:fa:6a:6b:e7:
                    64:06:21:fe:13:de:99:0b:fa:89:c6:9a:ce:e7:21:
                    8f:07:e6:df:64:5e:73:d9:19:6a:3e:b5:46:1a:07:
                    95:05:e7:d2:58:24:21:15:35:97:cc:b0:e9:ad:8c:
                    05:62:19:2d:45:b1:e6:b3:77:e9:65:94:5f:23:77:
                    9f:b8:80:b5:6b:28:9c:fe:21:90:50:6a:04:38:c1:
                    cf:86:59:69:da:9d:97:16:d4:ca:b6:28:00:89:b6:
                    e2:b6:03:1c:c6:d0:95:0f:22:e2:31:34:54:9a:75:
                    45:29:bd:1a:eb:fb:3b:33:94:47:76:c4:8a:86:a4:
                    77:56:51:55:93:85:1b:e2:47:04:1e:01:ba:f1:41:
                    ce:0a:51:1c:c6:41:f6:87:17:92:43:8a:ea:e4:fb:
                    ff:8a:5a:6e:73:91:6b:71:40:91:23:4f:ba:64:c6:
                    21:d2:48:e5:c8:62:03:3d:df:44:43:49:3b:e7:1e:
                    fb:81:f1:72:52:d2:fe:42:e3:13:c8:c7:39:10:6d:
                    1b:b9:ba:f1:13:9f:40:e4:99:aa:4d:55:8e:be:fb:
                    88:3b:62:c2:22:20:70:db:c7:5e:cc:24:e0:f5:ee:
                    75:bd:96:67:0c:f6:dc:c0:9e:84:31:04:a5:df:ea:
                    5b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AB:7E:11:93:A9:9F:2A:36:B1:E3:EA:A4:5A:17:5C:38:77:E0:BD
            X509v3 Authority Key Identifier:
                keyid:0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b2:4b:65:b5:27:21:85:0a:0d:a5:59:48:f3:f6:2c:6f:d6:
         5c:30:7b:f7:ca:86:9d:a3:8b:b2:cb:10:88:b6:3f:d9:b1:78:
         fb:5a:86:03:dd:53:07:c0:1e:1b:1b:c4:4e:49:4d:59:c8:29:
         19:5d:29:14:05:e2:5b:bd:f0:c7:6e:35:de:d7:95:23:1f:e4:
         7a:2c:7b:09:7f:94:cb:14:1a:70:de:91:7e:5f:c0:9e:ea:db:
         45:b7:0f:29:6a:3c:cf:4a:91:cc:77:73:42:e7:d7:f0:9e:a3:
         9d:46:64:fd:58:c6:d1:3d:f1:68:3d:62:34:f1:ac:3e:96:f2:
         7e:19:fa:d9:4f:b8:94:27:5c:59:ea:35:a0:a6:f5:4a:09:7c:
         0f:01:fa:22:61:5f:ad:8d:54:59:e2:b0:0b:8c:36:48:3b:a8:
         ab:cf:be:3f:42:96:7d:e0:1a:25:9b:65:1f:fe:70:4e:ca:f5:
         16:ef:e7:01:46:9a:6d:b6:81:20:08:ab:41:20:76:8d:17:62:
         dd:a0:7f:4b:da:40:9e:f2:a4:1e:8c:64:bb:40:2b:83:98:ac:
         2f:e0:3c:32:a5:f4:40:9a:8d:7e:9f:09:cc:6b:17:9d:e1:c1:
         a5:8b:77:d3:06:77:16:b0:da:03:3d:b1:03:5d:71:16:15:14:
         9f:38:63:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:18 2024 by rpki-client on console-ams.rpki-client.org